volatility3.framework.layers.scanners package¶
- class BytesScanner(needle)[source]¶
Bases:
volatility3.framework.interfaces.layers.ScannerInterface
- property context: Optional[volatility3.framework.interfaces.context.ContextInterface]¶
- Return type
- thread_safe = True¶
- version = (0, 0, 0)¶
- class MultiStringScanner(patterns)[source]¶
Bases:
volatility3.framework.interfaces.layers.ScannerInterface
- property context: Optional[volatility3.framework.interfaces.context.ContextInterface]¶
- Return type
- thread_safe = True¶
- version = (0, 0, 0)¶
- class RegExScanner(pattern, flags=RegexFlag.DOTALL)[source]¶
Bases:
volatility3.framework.interfaces.layers.ScannerInterface
A scanner that can be provided with a bytes-object regular expression pattern The scanner will scqn all blocks for the regular expression and report the absolute offset of any finds
The default flags include DOTALL, since the searches are through binary data and the newline character should have no specific significance in such searches
- property context: Optional[volatility3.framework.interfaces.context.ContextInterface]¶
- Return type
- thread_safe = True¶
- version = (0, 0, 0)¶